add secrets.js and some scaffolding